Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
File: Zd83n6ryEKcDbawF3mtXctvk3Ww.mft (raw, json)
Hash identifier: bn7HNuijkcUVHh+760fg3w+GWFCHYLRhxtGsuL6cjTE=
Subject key identifier: B5:6E:D6:9B:D5:E9:DE:3A:63:06:0F:42:84:F4:57:50:DF:6C:95:CE
Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
Certificate issuer: /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Certificate serial: 019DCF07758EBDF76161E211CFD3B0AA77DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
Manifest number: 18E2
Signing time: Mon 27 Apr 2026 13:01:05 +0000
Manifest this update: Mon 27 Apr 2026 13:01:05 +0000
Manifest next update: Tue 28 Apr 2026 13:01:05 +0000
Files and hashes: 1: Zd83n6ryEKcDbawF3mtXctvk3Ww.crl (hash: wbrJJ1l2P/21k+B1a2ntwiGwrq0HJfue61UPO5drkrk=)
2: cfc8AqxUQpHiP5l_Nwt2RxlR31E.roa (hash: l4uppHG903ldqi9DaDNBYospFemwSrJP6nlFEmmwSgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:75:8e:bd:f7:61:61:e2:11:cf:d3:b0:aa:77:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Validity
Not Before: Apr 27 13:01:05 2026 GMT
Not After : Apr 28 13:01:05 2026 GMT
Subject: CN=b56ed69bd5e9de3a63060f4284f45750df6c95ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ba:04:b4:f7:37:49:ca:46:b8:e5:be:23:cc:
65:29:5e:82:db:5c:74:c5:c6:6e:1a:21:26:25:ca:
2d:0e:f2:f1:a2:06:b6:fc:d8:34:9d:48:36:45:4e:
2e:e2:43:6a:ba:e9:1d:f9:06:f5:a1:3b:bf:2a:30:
b3:a6:2a:1e:d9:b7:60:2f:a0:ba:34:c2:f2:f7:e0:
c1:a5:88:5b:58:93:79:78:c7:85:7a:51:6f:e1:cf:
94:ed:e0:ad:65:61:81:c9:89:b2:01:f5:4d:a3:b4:
00:7b:2f:3a:c7:3d:fd:af:4c:d7:3a:84:24:07:65:
7d:67:54:f9:16:65:73:fc:ca:3d:c1:37:6f:ce:20:
3d:15:b7:dc:75:3b:45:a9:38:ea:96:6d:67:39:4d:
50:91:de:cf:df:2b:e7:41:a8:f7:a6:de:db:3f:2f:
96:82:fe:9e:32:ce:d4:db:a4:04:13:8f:70:2d:41:
f7:4f:c9:12:fe:55:9b:01:ff:85:4c:62:02:83:fa:
f2:3b:3c:4f:80:bf:c0:02:85:d8:00:6b:d5:c8:7b:
89:29:ab:64:aa:d9:f8:b5:9b:73:15:68:0a:8c:81:
08:bd:86:dd:24:28:2c:9d:77:3d:3f:58:6a:28:2a:
1c:ab:b8:20:cd:1a:73:0b:98:a4:2a:08:b8:69:9a:
7d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6E:D6:9B:D5:E9:DE:3A:63:06:0F:42:84:F4:57:50:DF:6C:95:CE
X509v3 Authority Key Identifier:
keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:03:1a:4e:e9:ed:91:f2:e9:fe:52:6a:e3:1b:b0:fc:42:a2:
57:a0:69:6f:46:43:15:ab:d3:11:e6:03:51:5b:e7:25:b3:99:
23:7b:d7:9a:2d:92:7d:4f:a4:35:60:be:38:38:10:2e:09:2f:
f1:dd:dd:d1:88:9e:05:c8:b8:fa:40:21:62:f7:26:5a:e4:97:
7d:31:26:d0:b9:37:ef:26:04:ac:b2:a4:34:af:f8:30:4c:a6:
ed:2b:c0:fa:99:a8:a7:63:5e:9a:50:d6:6e:01:25:f4:0c:9d:
54:37:92:9d:f4:b1:dd:11:78:0e:31:11:bc:a0:f7:56:8c:bf:
ba:e5:e9:88:6d:8c:bc:bf:eb:6c:3d:a1:9a:34:4f:0c:54:6b:
b2:6d:8e:f0:a2:5e:d1:6e:07:31:6e:22:4e:07:46:3e:e8:99:
f3:88:3e:9b:59:4f:7f:e8:62:60:00:bf:96:1a:df:6f:53:92:
f7:ad:df:30:8e:4d:09:ae:33:e8:a9:be:b2:9a:5c:79:75:e2:
00:7d:5f:15:e8:79:da:50:f3:4f:92:32:1f:c2:e9:ef:dd:bd:
1c:fd:d6:b4:31:6d:91:6e:b2:8d:fc:cb:a2:b0:d2:ef:7d:91:
10:86:a3:b1:35:d4:49:ba:d5:0f:da:d6:98:5a:0e:dc:a3:a3:
2b:68:f2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:13:42 2026 by rpki-client